Riskcovery

CVE-2026-93071

media: bcm2835-unicam: Fix asc leaked in error/remove path

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 17, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: bcm2835-unicam: Fix asc leaked in error/remove path

v4l2_async_nf_add_fwnode_remote() allocates the asc, which is freed when v4l2_async_nf_cleanup() is called.

Call v4l2_async_nf_cleanup() properly in the driver paths.

Discovered with kmemleak after rmmod:

unreferenced object 0xffff000084526b80 (size 64): comm "modprobe", pid 185, jiffies 4295013512 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 e8 0d ff bf 00 00 ff ff ................ 40 83 bc 84 00 00 ff ff 60 83 bc 84 00 00 ff ff @.......`....... backtrace (crc ac584083): [<00000000ffb081a7>] kmemleak_alloc+0x38/0x44 [<00000000d2fd9301>] __kmalloc+0x1b0/0x250 [<000000004dd5354d>] __v4l2_async_nf_add_fwnode+0x28/0x9c [<0000000067587657>] __v4l2_async_nf_add_fwnode_remote+0x3c/0x64

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 392cd78d495f36c201eb5cc425b01017d493e094 to before 5479372db364c80bb6bd59f640f5c31de3984babAffected
  • 392cd78d495f36c201eb5cc425b01017d493e094 to before 2c29cd408ef86e695acb2a5d4e00fa2f5695368dAffected
  • 392cd78d495f36c201eb5cc425b01017d493e094 to before de9be39cefda1ecd762e6a913665c01f7bb18100Affected
  • 392cd78d495f36c201eb5cc425b01017d493e094 to before 253c9659e25131b0169f718e7d094ac1aa0d9279Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.